Upgradation from ACS 5.4 to ACS 5.8

-------------

Please refer to the following link for known defects hitting latest ACS version:
https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/release/notes/acs_58_rn.html#pgfId-460509

-------------

Prior to the upgrade, please ensure you have a backup of AD join credentials, certificates, licenses and the configuration backup.

To take backup from the ACS CLI, please go through the below document, section backup:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-5/command/reference/cli/cli_app_a.html#pgfId-1149830

-------------

Regarding license, Ensure you have the PAK number. You can find the PAK number under System Administration > Configuration > Licensing > Base Server License. Take a screenshot of this page . This PAK number can be used to re-generate a license for the ACS.

Regarding certificates, You can check this in two places:-

1. System Administration > ... > Configuration > Local Server Certificates > Local Certificates . In this location, do you have a self-signed certificate?

If no, then you can back-up the certificate by Exporting the certificate. The Export option is provided in the above mentioned path. Please ensure, you export the certificate with the Private key.



2. Users and Identity Stores > ... > Certificate Authorities. In this location, do you have any Root-CA or Intermediate-CA certificates?

If yes, you need to export them as well using the Export option.

It is recommended to deregister the servers prior upgrade and then register them again after it is done.

-------------

Please find below, the steps to upgrade from 5.4 to 5.8 patch 8:


Apply 5.4 patch 8

5-4-0-46-8.tar.gpg https://software.cisco.com/download/release.html?mdfid=283883834&softwareid=282766937&release=5.4.0.46.0&relind=AVAILABLE&rellifecycle=&reltype=latest

acs patch install 5-4-0-46-8.tar.gpg repository ftp_repository_name

-----


Apply 5.6

ACS_5.6.0.22.tar.gz https://software.cisco.com/download/release.html?mdfid=286281502&softwareid=282766937&release=5.6.0.22&relind=AVAILABLE&rellifecycle=&reltype=latest

application upgrade ACS_5.6.0.22.tar.gz ftp_repository_name

Apply 5.6 patch 6

5-6-0-22-6tar.gpg https://software.cisco.com/download/release.html?mdfid=286281502&softwareid=282766937&release=5.6.0.22&relind=AVAILABLE&rellifecycle=&reltype=latest

acs patch install 5-6-0-22-6tar.gpg repository ftp_repository_name

-----

Apply 5.8

ACS_5.8.0.32.tar.gz https://software.cisco.com/download/release.html?mdfid=286286338&softwareid=282766937&release=5.8.0.32&relind=AVAILABLE&rellifecycle=&reltype=latest

application upgrade ACS_5.8.0.32.tar.gz ftp_repository_name

Apply 5.8 patch 8

5-8-0-32-8.tar.gpg https://software.cisco.com/download/release.html?mdfid=286286338&softwareid=282766937&release=5.8.0.32&relind=AVAILABLE&rellifecycle=&reltype=latest

acs patch install 5-8-0-32-8.tar.gpg repository ftp_repository_name


---------------



The FILE column has a list of all the files you need to download along with the link to download them from.

All of these files should be downloaded and placed in an FTP server reachable from the ACS.

The FTP server should be defined as an FTP repository on the ACS.

Then you can use the commands mentioned beside each file to install them.